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DETAILED ACTION 
Examiner's Amendment 

1. An examiner's amendment to the record appears below. Should the changes 
and/ or additions be unacceptable to Applicant, an amendment may be filed as 
provided by 37 CFR 1.312. To ensure consideration of such an amendment, it 
MUST be submitted no later than the payment of the issue fee. 

2. Authorization for this examiner's amendment was given in a telephone interview 
with Mr D'Aurelio, Michael on Feburary 02, 2007. During the telephone 
conference, Mr. D'Aurelio has agreed and authorized the examiner to amend 
Claims 1, 5-7, 9, 12-14, 16-18, and 20-23. 

Claims 

3. Replacing Claims 1. 5-7. 9, 12-14, 16-18, and 20-23 as follows: 

a. Claim 1: 

A system for authentication, comprising: 

a processor circuit having a processor and a memory; and 

an authentication system stored in the memory and executable by the 

processor, the authentication system comprising: 

a plurality of authentication agents, each of the authentication agents 
authenticating at least one user parameter by performing at least one 
authentication task; 

an authentication manager that requests each of the authentication agents 
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to authenticate an unauthenticated user parameter until all of the 
authentication agents have been requested to authenticate the 
unauthenticated user parameter and the authenticated user parameter is 
authenticated by at least one of the authentication agents, unless one of 
the authentication agents fails to authenticate the unauthenticated user 
parameter; 

wherein the unauthenticated user parameter that all of the authentication 
agents are requested to authenticate is identical for each of the 
authentication agents; and 

wherein each of the authentication agents is configured to transmit a valid 
response that indicates to the authentication manager that the respective 
authentication agent has authenticated the unauthenticated user 
parameter even though the respective authentication agent is not 
configured to perform a respective authentication task that is necessary to 
authenticate the unauthenticated user parameter, 
b. Claim 5: 

A system for authentication, comprising: 

a processor circuit having a processor and a memory; and 

an authentication system stored in the memory and executable by the 

processor, the authentication system comprising: 

a plurality of authentication agents, each of the authentication agents 
authenticating at least one user parameter by performing at least one 
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authentication task, wherein a parameter type associated with each of the 
authentication agents; 

an authentication manager that requests each of the authentication agents 
to authenticate an unauthenticated user parameter, wherein the 
unauthenticated user parameter that all of the authentication agents are 
requested to authenticate is identical for each of the authentication agents; 
and 

wherein each of the authentication agents authenticates the 
unauthenticated user parameter when the unauthenticated user parameter 
is of the parameter type associated with the respective authentication 
agent; and 
wherein: 

each of the authentication agents transmits an invalid response to the 
authentication manager upon a failure to authenticate the unauthenticated 
user parameter; 

each of the authentication agents transmits a valid response to the 
authentication manager upon a successful authentication of the 
unauthenticated user parameter; and 

each of the authentication agents transmits a valid response to the 
authentication manager that indicates to the authentication manager that 
the respective authentication agent has authenticated the unauthenticated 
user parameter even though the respective authentication agent is not 
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configured to perform a respective authentication task that is necessary to 
authenticate the unauthenticated user parameter. 

c. Claim 6: 

The system of claim 1, wherein: 

each of the authentication agents transmits an invalid response to the 
authentication manager upon a failure to authenticate the unauthenticated 
user parameter; and 

each of the authentication agents transmits a valid response to the 
authentication manager when the unauthenticated user parameter is 
successfully authenticated. 

d. Claim 7: 

A system for authentication, comprising: 

a processor circuit having a processoi- and a memory; and 

an authentication system stored in the memory and executable by the 

processor, the authentication system comprising: 

a plurality of authentication agents, each of the authentication agents 
authenticating at least one user parameter by performing at least one 
authentication task; 

an authentication manager that requests each of the authentication agents 
to authenticate an unauthenticated user parameter, wherein the 
unauthenticated user parameter that all of the authentication agents are 
requested to authenticate is identical for each of the authentication agents; 
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wherein, upon startup, tlie authentication manager is unaware of how 
many of the authentication agents exist in association with the 
authentication system and the authentication manager discovers the 
authentication agents; and 

wherein each of the authentication agents is configured to transmit a valid 
response that indicates to the authentication manager that the respective 
authentication agent has authenticated the unauthenticated user 
parameter even though the' respective authentication agent is not 
configured to perform a respective authentication task that is necessary to 
authenticate the unauthenticated user parameter, 
e. Claim 9: 

An authentication method, comprising: 

executing a plurality of authentication agents in a computer system, each 
of the authentication agents being configured to perform at least one 
authentication task; and 

sequentially requesting each of the authentication agents to authenticate 
an unauthenticated user parameter input into the computer system until all 
of the authentication agents have been requested to authenticate the 
unauthenticated user parameter and the authenticated user parameter is 
authenticated by at least one of the authentication agents, unless one of 
the authentication agents fails to authenticate the unauthenticated user 
parameter, wherein the unauthenticated user parameter that all of the 
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authentication agents are requested to authenticate is identical for each of 
the authentication agents; and 

generating a valid response in at least one of the authentication agents 
that is sent to the authentication manager that indicates to the 
authentication manager that the at least one of the authentication agents 
has authenticated the unauthenticated user parameter even though the at 
least one of the authentication agents is not configured to perform a 
respective authentication task that is necessary to authenticate the 
unauthenticated user parameter, 
f. Claim 12: 

An authentication method, comprising: 

executing a plurality of authentication agents in a computer system, each 
of the authentication agents being configured to perform at least one 
authentication task; 

* executing an authentication manager in the computer system to 
sequentially request each of the authentication agents to authenticate an 
unauthenticated user parameter input into the computer system, wherein 
the unauthenticated user parameter that all of the authentication agents 
are requested to authenticate is identical for each of the authentication 
agents; 

transmitting an invalid response from at least one of the authentication 
agents to the authentication manager upon a failure to authenticate a 
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respective user parameter; 

transmitting a valid response from at least one of the authentication 
agents to the authentication manager upon a successful authentication of 
the unauthenticated user parameter; and 

transmitting the valid response from at least one of the authentication 
agents to the authentication manager that indicates to the authentication 
manager that the respective authentication agent has authenticated the 
unauthenticated user parameter even though the respective authentication 
agent is not configured to perform a respective authentication task that is 
necessary to authenticate the unauthenticated user parameter. 

g. Claim 13: 

The authentication method of claim 9. further comprising: 
transmitting an invalid response to the authentication manager upon a 
failure to authenticate the unauthenticated user parameter; and 
transmitting a valid response to the authentication manager when the 
unauthenticated user parameter is successfully authenticated. 

h. Claim 14: 

An authentication method, comprising: 

executing a plurality of authentication agents in a computer system, each 
of the authentication agents being configured to perform at least one 
authentication task; 

executing an authentication manager in the computer system, wherein the 
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authentication manager is unaware of how many of the authentication 
agents exist when the authentication manager is first executed; 
discovering the authentication agents with the authentication manager 
upon execution of the authentication manager; 

employing the authentication manager to sequentially request each of the 
authentication agents to authenticate an unauthenticated user parameter 
input into the computer system, wherein the unauthenticated user 
parameter that all of the authentication agents are requested to 
authenticate is identical for each of the authentication agents; and 
obtaining a response from each of the authentication agents indicating 
whether the unauthenticated user parameter has been authenticated, 
wherein each of the authentication agents is configured to generate a valid 
response that indicates to the authentication manager that the respective 
authentication agent has authenticated the unauthenticated user 
parameter even though the respective authentication agent is not 
configured to perform a respective authentication task that is necessary to 
authenticate the unauthenticated user parameter, 
i. Claim 16: 

A computer program embodied on a computer readable storage medium 
and executable by a computer system for performing authentication, 
comprising: 

code that embodies a plurality of authentication agents, each of the 
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authentication agents authenticating at least one user parameter by 
performing at least one authentication task; 

code that embodies an authentication manager that requests each of the 
authentication agents to authenticate an unauthenticated user parameter 
until all of the' authentication agents have been requested to authenticate 
the unauthenticated user parameter and the authenticated user parameter 
is authenticated by at least one of the authentication agents, unless one of 
the authentication agents fails to authenticate the unauthenticated user 
parameter, wherein the unauthenticated user parameter that all of the 
authentication agents are requested to authenticate is identical for each of 
the authentication agents; and 

wherein each of the authentication agents is configured to transmit a valid 
response that indicates to the authentication manager that the respective 
authentication agent has authenticated the unauthenticated user 
parameter even though the respective authentication agent is not 
configured to perform a respective authentication task that is necessary to 
authenticate the unauthenticated user parameter, 
j. Claim 17: 

The computer program embodied on a computer readable storage 
medium and executable by the computer system of claim 16, wherein the 
authentication manager further comprises code that waits for a response 
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from each of the authentication agents, each response indicating whether 
the unauthenticated user parameter has been authenticated, 
k. Claim 18: 

The computer program embodied on a computer readable storage 
medium and executable by the computer system of claim 16, wherein at 
least one of the authentication agents further comprises code that calls 
upon an external authentication service to authenticate the 
unauthenticated user parameter. 
I. Claim 20: 

A computer program embodied on a computer readable storage medium 
and executable by a computer system for performing authentication, 
comprising: 

code that embodies a number of authentication agents, each of the 
authentication agents authenticating at least one user parameter by 
performing at least one authentication task; 

code that embodies an authentication manager that requests each of the 
authentication agents to authenticate an unauthenticated user parameter, 
wherein the unauthenticated user parameter that all of the authentication 
agents are requested to authenticate is identical for each of the 
authentication agents; and 

wherein each of the authentication agents further comprises: 

code that transmits an invalid response to the authentication manager 
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upon a failure to authenticate the unauthenticated user parameter; 
code that transmits a valid response to the authentication manager upon a 
successful authentication of the unauthenticated user parameter; and 
code that transmits a valid response to the authentication manager that 
indicates to the authentication manager that the respective authentication 
agent has authenticated the unauthenticated user parameter even though 
the respective authentication agent is not configured to perform a 
respective authentication task that is necessary to authenticate the 
unauthenticated user parameter, 
m. Claim 21: 

The computer program embodied on a computer readable storage 
medium and executable by the computer system of claim 16, wherein 
each of the authentication agents further comprise: 
code that transmits an invalid response to the authentication manager 
upon a failure to authenticate the unauthenticated user parameter; and 
code that transmits a valid response to the authentication manager when 
the unauthenticated user parameter is successfully authenticated, 
n. Claim 22: 

A computer program embodied on a computer readable storage medium 
and executable by a computer system for performing authentication, 
comprising: 

code that embodies a number of authentication agents, each of the 
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authentication agents authenticating at least one user parameter by 
performing at least one authentication task; 

code that embodies an authentication manager that requests each of the 
authentication agents to authenticate an unauthenticated user parameter, 
wherein the unauthenticated user parameter that all of the authentication 
agents are requested to authenticate is identical for each of the 
authentication agents; 

wherein the authentication manager further comprises code that discovers 
the authentication agents upon an initial execution of the authentication 
manager, the authentication manager being unaware at the time of initial 
execution of how many of the authentication agents exist that may be 
requested by the authentication manager to authenticate the 
unauthenticated user parameter; and wherein each of the authentication 
agents further comprises code that generates a valid response that 
indicates to the authentication manager that the respective authentication 
agent has authenticated the unauthenticated user parameter even though 
the respective authentication agent is not configured to perform a 
respective authentication task that is necessary to authenticate the 
unauthenticated user parameter. 
0. Claim 23: 

The computer program embodied on a computer readable storage 
medium and executable by the computer system of claim 22, wherein the 
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authentication manager further comprises code that generates a lookup 
table listing each of the authentication agents after initial execution after 
the authentication agents are discovered. 



5. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Yin-Chen Shaw whose telephone number is 571- 
272-8593. If attempts to reach the examiner by telephone are unsuccessful, the 
examiner's supervisor, Kim Yen Vu can be reached on 571-272-3859. The fax 
phone number for the organization where this application or proceeding is 
assigned is 571-273-8300. Any inquiry of a general nature or relating to the 
status of this application or proceeding should be directed to the receptionist 
whose telephone number is 571-272-2100. / 



Allowable Subject Matter 



4. Claims 1-3, 5-10, 12-18, and 20-23 are allowed. 



Conclusion 



YCS 



Feb. 02, 2007 
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